(opennlp-sandbox) 01/01: OPENNLP-1690: Add opennlp-tools to dependabot excludes of addons/sandbox

[ma...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

mawiesne pushed a commit to branch OPENNLP-1690-Add-opennlp-tools-to-dependabot-excludes-of-addons/sandbox
in repository https://gitbox.apache.org/repos/asf/opennlp-sandbox.git

commit 8cef0b5534da95e7dc1916a945a2d13f33ff52d6
Author: Martin Wiesner <ma...@hs-heilbronn.de>
AuthorDate: Wed Jan 22 09:44:18 2025 +0100

    OPENNLP-1690: Add opennlp-tools to dependabot excludes of addons/sandbox
---
 .github/dependabot.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 19a3d75..8f6a22f 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -22,6 +22,15 @@ updates:
       interval: weekly
       time: '04:00'
     open-pull-requests-limit: 10
+    ignore:
+        # Update strategy for secondary project components (sandbox & addons)
+        # ------------------------------------------------------------------
+        # The components' version should be aligned with primary components around 'opennlp-tools',
+        # that is, the SNAPSHOT version should match the current in-development version.
+        # Consequently, the opennlp-tools dependency can't be updated via dependabot and
+        # is thus excluded / ignored here, as additional (manual) steps are required.
+      - dependency-name: "org.apache.opennlp:opennlp-tools"
+        update-types: [ "version-update:semver-major", "version-update:semver-minor", "version-update:semver-patch" ]
 
   - package-ecosystem: "github-actions"
     directory: "/"